Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2814:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pubKeyData’
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2044:1: enter_function: entry to ‘SECKEY_SetPublicValue’
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2054:9: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2054:38: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2059:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2068:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2072:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2134:8: branch_true: following ‘true’ branch (when ‘rv == 0’)...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2135:14: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2135:14: call_function: calling ‘PK11_ImportPublicKey’ from ‘SECKEY_SetPublicValue’
# 2812|       SECStatus rv;
# 2813|   
# 2814|->     if (pubKeyData->len <= SHA1_LENGTH) {
# 2815|           /* probably an already hashed value. The strongest known public
# 2816|            * key values <= 160 bits would be less than 40 bit symetric in

Scan Properties

analyzer-version-clippy	1.90.0
analyzer-version-cppcheck	2.18.3
analyzer-version-gcc	15.2.1
analyzer-version-gcc-analyzer	16.0.0
analyzer-version-shellcheck	0.11.0
analyzer-version-unicontrol	0.0.2
diffbase-analyzer-version-clippy	1.90.0
diffbase-analyzer-version-cppcheck	2.18.3
diffbase-analyzer-version-gcc	15.2.1
diffbase-analyzer-version-gcc-analyzer	16.0.0
diffbase-analyzer-version-shellcheck	0.11.0
diffbase-analyzer-version-unicontrol	0.0.2
diffbase-enabled-plugins	clippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code	0
diffbase-host	ip-172-16-1-39.us-west-2.compute.internal
diffbase-known-false-positives	/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpm	known-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-config	fedora-rawhide-gcc-latest-x86_64
diffbase-project-name	nss-3.115.1-1.fc43
diffbase-store-results-to	/tmp/tmpm19ifgqp/nss-3.115.1-1.fc43.tar.xz
diffbase-time-created	2025-10-28 19:24:34
diffbase-time-finished	2025-10-28 19:34:06
diffbase-tool	csmock
diffbase-tool-args	'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpm19ifgqp/nss-3.115.1-1.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpm19ifgqp/nss-3.115.1-1.fc43.src.rpm'
diffbase-tool-version	csmock-3.8.3.20251027.143044.ge6b947b-1.el9
enabled-plugins	clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code	0
host	ip-172-16-1-39.us-west-2.compute.internal
known-false-positives	/usr/share/csmock/known-false-positives.js
known-false-positives-rpm	known-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-config	fedora-rawhide-gcc-latest-x86_64
project-name	nss-3.117.0-1.fc44
store-results-to	/tmp/tmpigduwc4z/nss-3.117.0-1.fc44.tar.xz
time-created	2025-10-28 19:34:54
time-finished	2025-10-28 19:43:57
title	Newly introduced findings
tool	csmock
tool-args	'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpigduwc4z/nss-3.117.0-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpigduwc4z/nss-3.117.0-1.fc44.src.rpm'
tool-version	csmock-3.8.3.20251027.143044.ge6b947b-1.el9